react2shell

React2Shell React सर्वर घटकों / सर्वर कार्रवाइयों CVE-2025-55182 और CVE-2025-66478 में प्रोटोटाइप प्रदूषण कमजोरियों का शोषण करने, कमजोर सर्वरों पर दूरस्थ कोड निष्पादन RCE सक्षम करने के लिए एक CLI उपकरण। मूल PoC : https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc चेतावनी: यह उपक...

CVE-2025-55182-poc

CVE-2025-55182-poc إثبات مفهوم PoC لاستغلال CVE-2025-55182 ، يستهدف ثغرة تنفيذ الأكواد عن بُعد RCE غير المصادق عليها في Next.js Server Actions. يستغل هذا السكربت تلوّث النموذج الأولي prototype pollution أثناء إلغاء تسلسل حمولات React Server Components RSC متعددة الأجزاء multipart لحقن أوامر ضارة ...

CVE-2025-55182-Exploit-PoC-Scanner

CVE-2025-55182 - React Server Components RCE Exploit v2.0 A comprehensive security research tool for testing CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React Server Components RSC and Next.js Server Actions. Vulnerability Overview...

CVE-2026-49455 Waku: Cross-Origin CSRF on RSC Server Action Dispatch

Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registere...

react2shell-lab

React2Shell Vulnerability Lab This is a deliberately vulnerable Next.js application for testing CVE-2025-55182 and CVE-2025-66478 React Server Components RCE. ⚠️ WARNING : This application is intentionally vulnerable. Use only in isolated lab environments. Vulnerability Details CVE-2025-55182 /...

React2Shell

React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...

CVE-2025-55182-Auto-Scanner

root@kitploit: CVE-2025-55182 Scanner is a high-performance tool for detecting vulnerable Next.js Server Action endpoints. It uses multi-threaded scanning, confidence-based detection, and multiple response indicators to identify potential Remote Code Execution RCE vulnerabilities. Features -...

CVE-2025-55183

CVE-2025-55183 Scanner for React Server Functions source code exposure vulnerability. What is this? CVE-2025-55183: React 19.0.0-19.2.1 Server Actions can be exploited to expose their full source code including hardcoded secrets, API keys, and database credentials. References:...

rust-cve-2025-55182-scanner

ماسح CVE-2025-55182 Rust ماسح ثغرات عالي الأداء ومتزامن مكتوب بلغة Rust للكشف عن CVE-2025-55182 تنفيذ الأوامر عن بُعد في Next.js Server Actions عبر أهداف متعددة. 🚀 الميزات ⚡ أداء عالي بفضل Rust 🧵 محرك مسح متعدد الخيوط ⏱ نظام مهلة واعادة محاولة قابل للتعديل 📄 دعم مسح الأهداف المجمعة 📊 تقارير بتنسي...

CVE-2025-55182

🚨 NextRce — CVE-2025-55182 Next.js / React Server Components RCE NextRce एक सुरक्षा अनुसंधान उपकरण है जो CVE-2025-55182 का प्रदर्शन करता है, जो Next.js App Router अनुप्रयोगों में React Server Components RSC और Server Actions का उपयोग करने वाली एक गंभीर कमजोरी है। यह कमजोरी एक हमलावर को अप्रमाणित...

CVE-2025-55182-TOOLS

CVE-2025-55182 शोषण उपकरण CVE-2025-55182 व्यापक शोषण/पहचान उपकरण द्वारा विकसितMingYi Security Lab विशेषताएँ भेद्यता पहचान : एकाधिक लक्ष्यों को भेद्यता के लिए बैच स्कैन करें पथ स्कैनिंग : भेद्य पथों की खोज के लिए सामान्य सर्वर एक्शन एंडपॉइंट्स को स्कैन करें रिमोट कोड निष्पादन : भेद्य लक्ष्यों पर...

r2s

React2Shell R2S - أداة اختبار CVE-2025-55182 أداة متقدمة لاختبار الاستغلال لتقييم الثغرة CVE-2025-55182 الميزات • التثبيت • الاستخدام • بيئة الاختبار • إخلاء المسؤولية القانوني 📖 ما هو R2S؟ R2S React2Shell هي أداة لاختبار الأمان صُممت لمساعدة باحثي الأمان والمطورين ومختبري الاختراق في تقييم ما إذ...

CVE-2025-55182-Exploit

CVE-2025-55182 — ثغرة إلغاء التسلسل في Next.js Flight RCE أداة استغلال تنفيذ الأوامر عن بُعد لثغرة إلغاء التسلسل في إجراءات خادم Next.js Flight 📌 نظرة عامة يحتوي هذا المستودع على أداة استغلال صالحة لـ CVE-2025-55182 ، وهي ثغرة إلغاء تسلسل في بروتوكول Flight الخاص بـ Next.js إجراءات الخادم. من خلا...

CVE-2025-55182-Dockerized

CVE-2025-55182 - Dockerized Proof of Concept This repository contains a dockerized proof of concept for CVE-2025-55182, a critical remote code execution vulnerability in React Server Components RSC that affects Next.js applications using Server Actions. Credits The original proof of concept and...

CVE-2025-55182

CVE-2025-55182 Batch Detection Tool Efficient batch detection tool for the Next.js prototype pollution vulnerability CVE-2025-55182. Vulnerability Overview CVE-2025-55182 is a prototype pollution vulnerability in the Next.js framework. Attackers can exploit prototype pollution by crafting malicio...

react2shell-poc-CVE-2025-55182

React2Shell PoC CVE-2025-55182 A Proof-of-Concept PoC script for React2Shell CVE-2025-55182, a critical remote code execution RCE vulnerability affecting Next.js applications using Server Actions. !WARNING Disclaimer : This tool is for educational and authorized testing purposes only. I am not...

cve-2025-66478

CVE-2025-55182 This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerabilities affecting React Server Components and Next.js. !Warning This setup is intentionally vulnerable and must never be exposed to the public...

R2S_CVE-2025-55182

CVE-2025-55182 Scanner Vulnerability scanner for CVE-2025-55182 - Remote Code Execution in Next.js Server Actions. About CVE-2025-55182 Severity: Critical CVSS TBD Affected Versions: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Impact: Remote attackers can execute...

nextjs-CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 React2Shell - Next.js Remote Code Execution RCE PoC Critical vulnerability in Next.js Server Actions allowing unauthenticated Remote Code Execution via React Flight Protocol deserialization Overview This repository contains a Proof of Concept PoC for the critical R...

nextjs-CVE-2024-34351-_exploit

CVE-2024-34351 एक्सप्लॉइट CVE-2024-34351 PoC Next.js सर्वर एक्शन्स में सर्वर-साइड रिक्वेस्ट फोर्जरी · CVE-2024-34351 · GitHub एडवाइज़री डेटाबेस NextJS ऐप्स में SSRF की खोज सारांश NextJS SSRF के पूर्ण शोषण के लिए PoC। एक हमलावर CVE-2024-34351 भेद्यता का उपयोग करके Next.js सर्वर से किसी भी वेबसाइट ...